From prompt to pwned: chaining LLM and web bugs to Admin

Introduction LLMs and their web integrations now power countless applications, including some belonging to our customers who, naturally, may want to assess their resilience against attacks. Although these systems look very smart, trusting them blindly security-wise could be a catastrophic, as we will discover through this article. When the topic of LLM vulnerabilities comes up, most of the time, prompt injection comes on top. Buying a car for one dollar, social engineering a chatbot to reset pas...